GALOIS THEORY OF ITERATED ENDOMORPHISMS 
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Abstract. Given an abelian algebraic group A over a global field F, a S A(F), 
and a prime £, the set of all preimages of a under some iterate of [£] generates an 
extension of F that contains all £-power torsion points as well as a Kummer-type 
extension. We analyze the Galois group of this extension, and for several classes of A 
we give a simple characterization of when the Galois group is as large as possible up 
to constraints imposed by the endomorphism ring or the Weil pairing. This Galois 
group encodes information about the density of primes p in the ring of integers of 
F such that the order of (a mod p) is prime to £. We compute this density in the 
general case for several classes of A, including elliptic curves and one-dimensional 
tori. For example, if F is a number field, A/F is an elliptic curve with surjective 
2-adic representation and a £ A(F) with a £ 2A(F(A[A])), then the density of p 
with (a mod p) having odd order is 11/21. 



1. Introduction 

Let F be a global field, A an abelian algebraic group defined over F,aG A(F), and £ a 
prime. The tower of extensions F([£ n ]~ l (a)),n > 1 contains all £-power torsion points 
for A, as well as a Kummer-type extension. The action of the absolute Galois group 
Gal (F sep / F) on this tower encodes density information about the orders of reductions 
a mod p, as p varies over primes of the ring of integers of F (or F[C] if F := F(C) 
is the function field of the affine curve C). (See Theorem 13.21 ) In this paper we give 
criteria that ensure the Galois action on the tower F([£ n ]~ l (a)),n > 1 is as large as 
possible given natural constraints arising from the Weil pairing or endomorphisms 
not in Z, and compute the associated density. We prove results such as: 

Theorem 1.1. Let F be a number field with ring of integers Op, E an elliptic curve 
defined over F , a 6 E(F), and £ a prime. Suppose that a £A(F) and the £-adic 
Galois representation associated to E surjects onto GL 2 (Z^). If £ = 2, suppose in 
addition that a (jL 2A(F(A[4])). Then the density of primes p C Op with a mod p 
having order prime to £ is 

£ 5 -£ 4 -£ 3 + £ + l 
£ 5 -£ 3 -£ 2 + l ' 



2000 Mathematics Subject Classification. 11F80 (primary), 14L10, 14K15 (secondary). 
The first author's research was partially supported by NSF grant DMS-0852826. 

1 



2 



RAFE JONES AND JEREMY ROUSE 



The hypotheses of Theorem II .11 are easy to verify for specific E (see Proposition 15. ip . 
The i = 2 case yields the following corollary 

Corollary 1.2. The Somos-4 sequence is defined by 1 and for 

n > 4 by 

«n-l«n-3 + a n-2 
a n = . 

The density of primes p G Z dividing at least one term of this sequence is 11/21. 

Proof. Let E be defined by y 2 + y = x 3 — x, and let a = (0, 0). Assume for a moment 
that 

rri on f 0>n ~ a n-l a n+l a n-l a n+2 ~ 2a n -\a n a n+ i 

(1) [2,-3]a=^ , 

It follows that p | a n precisely when [2n — 3}a = mod p, which occurs if and only if 
a has odd order modulo p. In Example 15.41 we check the hypotheses of Theorem 11.11 
for E and a, showing that the density of p such that a has odd order modulo p is 
11/21. 

To prove ([T]), one can use the group law on E to reduce (jTJ) to the identity 

F(a n _i, a„, a n+ i, a n+2 ) = 0, where F(a, b, c, d) = a 2 cP — Aabcd + ac 3 + b 3 d + b 2 c 2 . 
It is easy to see that F(a n -i, a n , a n+ i, a n+2 ) = T i±2 --F(an-2, o-n-i, a«, a n +i)- Equation 

> * lira — 2 v ' 

([T]) now follows by induction and the fact that F(l, 1, 1, 1) = 0. □ 

We also examine the Galois action on the tower F([£ n ]~ 1 (a)),n > 1 in the context of 
abelian algebraic groups other than elliptic curves. Our analysis has two components: 
first, to give explicit conditions on A and a that guarantee the Galois action is as 
large as possible (subject to natural constraints such as commutativity with the Weil 
pairing or the action of endomorphism rings larger than Z) and second, to compute 
the associated density in the case where the Galois action is as large as possible. 

In pursuit of the first goal, we begin by setting to be the union over n > 1 of 
the extensions F([£ n ] _1 (a)). The group Gal (ifoo/F) acts naturally on the tree of 
preimages of a under repeated applications of £, and thus we refer to the map 

u : Gal (F scp /F) -> Gal {K^/F) 

as the arboreal Galois representation associated to A and a. The image of us has as a 
quotient the usual £-adic Galois representation attached to A, given by the action of 
Galois on the Tate module Ti(a) of A. The kernel of this quotient map is isomorphic 
to subgroup of Tg(a) (see p. [7] for details), and we refer to it as the Kummer part of 
the image of u. The image of the £-adic representation has been the subject of much 
study, and explicit conditions ensuring surjectivity (up to constraints imposed by the 
endomorphism ring or the Weil pairing) are generally known; here we collect them and 
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give a few additions in the cases where £ is 2 or 3. Generally speaking, surjectivity 
modulo a low power of £ (usually 1) ensures £-adic surjectivity See Propositions 
14.11 (for A a one- dimensional torus), 15.11 (for A and elliptic curve without complex 
multiplication). |5\71 (for A an elliptic curve with complex multiplication), and 16. II (for 
A a higher- dimensional abelian variety). The study of the surjectivity of the Kummer 
part originated in pQ, [29], and has continued recently thanks in part to applications 
to the support problem (see [20] for an overview). Our contribution is to give a simple 
characterization of when the Kummer part is the full Tate module for certain classes 
of A (see Theorems 14.21 15.21 15.81 16.21) . In the latter three theorems, for all £ ^ 2 the 
condition is just a ^ £A(F). In the cases we consider, this makes explicit [21 Theorem 
2, p. 40], which states that if A is an abelian variety or the product of an abelian 
variety by a torus, then the Kummer part is the full Tate module for all but finitely 
many £ and has open image for all i (see also [271 Theorem 2.8] and J8j Proposition 
2.10] for the latter statement). This result stems essentially from work of Ribet [29], 
[H] , where it is shown that for A belonging to a large class of commutative algebraic 
groups, the modulo-^ Kummer part is all of A[£] for all but finitely many £. 

Our second goal is to compute, in the case where u is surjective up to natural con- 
straints, the density of p such that a mod p has order prime to £. In Theorem 13.81 
we give a method for computing this density, and carry out this computation when A 
is a one-dimensional torus (Proposition 14. 5|) or an elliptic curve (Theorem 15.51 in the 
non-CM case, and Theorem 15.101 in the CM case). For instance, when A = E is an 
elliptic curve with complex multiplication, in general a mod p has odd order for a set 
of p of density 2/9 when 2 splits in the CM ring of E, and 8/15 when 2 is inert in the 
CM ring of E. That the image of u;(Frob p ) encodes £-power divisibility properties 
of | a modp| has already been established for abelian varieties in [27] (see also [H 
Proposition 2.11]), where it is shown that various phenomena occur for all primes in 
a set of positive Dirichlet density. However, no densities are computed for specific 
varieties. On the other hand, work originating with Hasse [10] . [TTj and including 
Moree [25] and others has led to the computation of all such densities in the case 
where A is a trivial one- dimensional torus. 

In Section [2] we develop some general aspects of arboreal Galois representations for 
any quasi-projective variety V. In Section [3] we specialize to the case where V = A is 
an abelian algebraic group. We discuss in detail the Kummer part of the image of u>, 
and its relation to the image of the usual £-adic representation. We also give general 
criteria for the Kummer part to be the full Tate module (Theorem 13.41) . and show 
that when this occurs we can determine J 7 (G < j,(oc)) via a certain matrix computation 
(Theorem 13.81) . In SectionHJwe discuss the case of algebraic tori. In the case A = G m , 
we reprove certain results of Hasse, Moree and others [22]; and we treat the case 
where A is a twisted G m . We also discuss some examples of higher- dimensional tori. 
In Section [5] we deal with both non-CM and CM elliptic curves. In Section [6] we 
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treat the case of higher-dimensional abelian varieties. Although we are able to give 
explicit criteria ensuring that the Kummer part is the full Tate module (Theorem 
16. 2p . the complexity of GSp 2 d(Zy makes the computation described in Theorem 13.81 
quite difficult to carry out. For small i we approximate T {G ^(a)) using MAGMA, 
and show for instance that if dim A = 2, I = 2, and A, a satisfy mild hypotheses, 
then 0.579 < T^G^a)) < 0.586. Thus the density of the set of p such that \a mod p| 
is odd moves farther from the naive value of 1/2 in the dimension 2 case. 

Question 1.3. If we fix say £ = 2 does the limit of FiG^a)) as the dimension of A 
grows exist? If so, what is it? 

The first part of Question 11.31 is answered in the affirmative by Jeff Achter in the 
first appendix to this article. One may also ask whether, if A and a are fixed and i 
grows, the limit of T{G${a)) must always approach 1. Finally, we have included a 
brief appendix of data relating to each example in the paper. 

2. Preliminaries 

In this section we develop the theory of general arboreal Galois representations. While 
this degree of generality will not be fully used in the sequel, it provides a framework 
for the computational component of the paper. 

Let V be a quasiprojective variety and <fi : V — > V be a finite morphism, both defined 
over F. Define U n to be the set of nth preimages of a under the morphism <p : V — > V. 
Note that T^{a) := |J n U n becomes a rooted tree with root a when we assign edges 
according to the action of (f>, i.e. (3i and /3 2 are adjacent if and only if <p(Pi) = /3 2 . 
Moreover, if T^{a) is disjoint from the branch locus 

^ = { 7 e^:#0- 1 (7)<deg0}, 

then U n has (deg0) n elements and T^(a) is the complete (deg0)-ary rooted tree. This 
disjointness may be verified by checking that a is not in (J n (p n {B^). 

Let K n be the extension of F obtained by adjoining the coordinates of the elements 
of U n , and let Koo := [j n K n . Put Q n = G n ^(a) := Gdl(K n /F), and note that Q n 
is the quotient of G$(a) obtained by restricting the action of G^(a) on T^(a) to the 
first n levels of T^{a). 

We now give a formal definition of Note that G^a) is a profinite group 

and thus has a natural Haar measure /i, which we take normalized to have total mass 
1. Define the ends of T^(a) to be the profinite set lim{0~ n (o;)} under the natural 
maps {(p~ n (a)} — > {0~ m (a)} for n > m given by <fi n ~ m . 

Definition. Assuming the notation above, we set 

J- {G ^a)) := fj,({g G G^(a) : g fixes at least one end ofT^a)}). 
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Remark. A straightforward argument using the definitions yields 

J- \G '</,(«)) = lim l/#Q n • #{g G Qn '■ 9 fi xes a t least one point in U n }. 

n— too 

This limit exists since the sequence is bounded and monotonically decreasing. 

A primary consideration in this paper is reduction modulo p of a quasiprojective 
variety and its self-morphisms. We sketch here what we mean by this; our discussion 
is an abbreviated form of that in [201 pp. 107-108]. There exists a reduced scheme V/O 
of finite type such that V is the generic fiber of V, as one can see by, loosely speaking, 
eliminating denominators in the defining equations of V. We denote by V p the fiber 
of V over p, and by f p the finite field O/p. Given a G V(F) and a finite morphism 
: V — > V, for all but finitely many p the following hold: V p is quasiprojective, there 
is a reduction a p G Vp(/ P ) of a that is independent of the choice of V, and there is a 
reduced morphism : V p — > Vp with deg = deg 0. 

In this section we show that FiG^a)) encodes certain dynamical information about 
a under as p varies over the finite primes of F. By the density of a set S of primes 
of F, we mean the Dirichlet density 

(2) D(S) = lim EpeS N(PyS 



where N(p) denotes the norm of p. Note that the limit above does not exist for all 
sets of primes, and so we define the upper density D + (S) to be the expression in (j2J) 
with lim replaced by lim sup. There is a stronger notion called natural density, given 
by 

d(S) = lim #{p G S : N(p) < n}/#{p : N(p) < n}. 

n—*oo 

In the case where F is a number field, the results of this paper hold with D(S) 
replaced by d(S), due to the Chebotarev density theorem (in the function field case, 
Chebotarev's theorem requires additional hypotheses to give results about natural 
density) . 

Before stating the main result of this section, we give some terminology. If S is a set, 
/ : S — >• S is a map, and f n the nth iterate of /, we say that s G S is periodic under 
/ if f n (s) = s for some n > 1. We say that s is preperiodic if s is not periodic but 
f n (s) = f m {s) for some n, m > 1. Note that if S is finite then every point in S is 
either periodic or preperiodic. 

Proposition 2.1. Assume the notation above, and let 

S = {p C O : a G V(fp) is periodic under 0}. 
Then TiG^ip)) > D + (S). In particular, if D(S) exists then TiG^a)) > D(S). 
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Remark. In Theorem \3.S\ we give conditions that imply D(S) exists and that the 
inequality is an equality. 

Proof. Let Per(0, a) = {p C O : = a for some n > 1}. We begin by showing 

that p G Per(0, a) if and only if for each n there is 7 G V(f p ) such that (7) = a. 
If (a) = a for some m, then for any n we may write n = mk + r with < r < m 
and take 7 = 0™ r (a). To show the reverse inclusion, the finiteness of V(f p ) implies 
that there exist n 2 > n\ and 7 such that ^7) = 2 (7) = a. Then 

-rri2— ni / \ -y«2-ni /-r"i / \\ -7T12 / \ 

(a) = (0 (7)) = (7) = a. 

Now let 

Q n = {p : p is unramified in K n and <j> (x) = a has no solution in V(/ p ) }. 

If p G Q n , then by the previous paragraph, clearly p G" Per(0, a). Since only finitely 
many primes ramify in K n , we have 

(3) J D + (Per(0,a))<l- J D + (fi„)- 

Let Gf be Galois group of the separable closure of F, and let Frob p C Gf be the 
Frobenius conjugacy class at p. By the Chebotarev density theorem, the density of p 
with Frobp having prescribed image C C Q n exists and is #C/#^„. 

Let p be a prime of F not ramifying in K n and such that deg = deg 0; this excludes 
only a finite number. There exists 7 G V(f p ) such that (7) = a if and only if the 
action of Frob p on U n has a fixed point. By the Chebotarev density theorem the 
density of such p exists and equals 

#{0" G Q n '■ o" fixes at least one element of U n }/#Q n . 

Let us denote this quantity by d n , and note that d n = D{VL c n ) = 1 — D(Q n ) (so in 
particular D(Q n ) exists). By (j3J) we now have D + (Per(0, a)) < lim <i„, and this last 

limit is just T{G). □ 

We close this section with some general remarks about arboreal representations. A 
natural question to ask is when G^a) must have finite index in Aut(T^(o;)), where the 
latter indicates the full group of tree automorphisms. Certainly this need not happen 
all the time, as the examples in the rest of this paper show: when V has a group 
structure, automorphisms of T^(a) failing to commute with the group law cannot be 
Galois elements, preventing G^a) from being a large subgroup of Aut(T^(a)). There 
are, however, situations where G^a) = Aut(T^(a)), such as when F — Q, V = P 1 , 
= x 2 + 1, and a = [37]. Indeed, a similar result holds for infinitely many in 
the family x 2 + c [37], though even in this family open questions remain: for c = 3, 
|Aut(T^(a)) : G<p(a)\ > 2, and the index is not known to be finite. Less is known 
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about the more general question of whether \Aut(T^,(a)) : G^(a)| must be finite in 
the case F = Q and V — P 1 . The first author has shown finite index for <p belonging 
to two infinite families of quadratic polynomials pjj Section 3], but otherwise the 
question remains open. For a related discussion, see [I]. We note that in the case 
where |Aut(T^(a)) : G^{a)\ is finite, we have F{G) = 0; this follows from natural 
generalizations of [16j Section 5]. 



3. Arboreal representations associated to abelian algebraic groups 

In this section, we specialize to the case where V = A is an abelian algebraic group 
and is multiplication by a prime £. We first give an interpretation of ^(G^a)) in 
this case, then we describe the Galois groups Q n := Gal (F(U n )/F) in terms of the 
groups A[£ n ] := {x G A : £ n x = 0} and their automorphism groups. We show that 
the image G^{pi) of uj = u>^ a : Gal (F scp /F) — > AutfT^a)) lands inside a particular 
semi-direct product, and fits into a short exact sequence with the Kummer part and 
the image of the £-adic representation. Moreover, we give criteria for the Kummer 
part to be the full Tate module. 

We fix a G A(F), and we refer to G^a), T^(a) and ^(G^a)) as G, T, and Fi^G), 
respectively. We denote the group operation on A additively. We assume that = [£] 
has degree £ d and is finite and separable. This implies that has no branch points, 
and that the extensions K n j ' F are Galois. It also implies that A[£ n ] = (Z/£ n Z) d for 
all n > 1. 

The map uj has a natural decomposition into two parts because A is an abelian alge- 
braic group, and we now give some notation and terminology that we use throughout 
the sequel. Let Ti(A) := limAff™] be the Tate module of A. Note that in the notation 
of Section [2], T t (A) is the same as T^(O), where O G A is the identity. We make one 
change in notation: since T £ (A) has a group structure, we use Aut(Ti(A)) to denote 
the set of group automorphisms; before we used Aut(T^(a)) to denote the set of tree 
automorphisms. 

Definition. For each n > 1, let f3 n G U n be a chosen element so that <fi{!3 n ) = f3 n -i! 
with j3 = a. Define 

u n : Gal (K n /F) -> A[£ n \ x Aut(A[r]) 

by u n (a) := (cr(/3 n ) — (3 n , cr|^n]). Passing to the inverse limit gives uj : Gal (i^oo/F) — > 
T e (A) x Aut(TXA)). 

For the remainder of the paper, we will use the following notation. 
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Notation Meaning 



F Base field 

T n F(A[£ n }) 

F n F{(3 n ) 

K T F 

J1 n J - n 1 n 

T I |°° T 

-too Un=l ±n 

K \ \°° K 

-"-00 Un=l A » 

T n Gal (T n /F), the torsion part 

/C n Gal(K n /T n ), the Kummer part 

Q n Gal (K n / F) 

p Gal (Tqo/F) — » Aut(T^(yl)), the torsion representation 

T limT^, the image of p 

k Gal (Koo/Too) Ti(A), the Kummer map 

to Gal(i^oo/F) — > Te(A) x Aut(T£(A)), the arboreal representation 



The next proposition says that these two parts give us full information about the 
image of k. It is closely related to [271 P- 5]. 

Proposition 3.1. Assume the notation above. For n > 1, uj n is an infective homo- 
morphism. 



Proof. For ff, r 6 Gal (K n /F), we have 

Wn(o-r) = (crr(/3 n ) - fi n , (tt\a[^\) 

= (a"(r(/3 n )) - cr(/3 n ) + cr(/3 n ) - /3 n , crU^r^™]) 
= ((cr(/3„) - /3 n ) + o-(r(/3 n ) - p n ), <t\a{4>«\t\a[<i>*]) 
= (o-(p n ) - p n , cr)(r(/3„) - /3 n , r) 
= cj n (cr)o; n (r). 

Thus, o; n is a homomorphism. Suppose that a G kerc<j n . Then, cr(/3 n ) — (3 n = so 
cr(/? n ) = /3 n . Moreover, ct|a[£«] is the identity. Thus, if (3 G C/ n we have £ n /5 = a and 
so 

£ n ((3-Pn) = a-a = 0. 

Thus, /3 - /?„ G Hence, cr(/? - (3 n ) = (3 - (3 n . It follows that (t(/3) = /3. Thus a 

fixes ?7 n and hence lf n , proving that o = 1 and u; n is injective. □ 
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We summarize the preceding discussion and Proposition with the following commu- 
tative diagram: 



1 



Gal (iWT^ 



Tt(A) 



Gal(iWF) 



Gal (Too/F) 



T e (A) x Aut(TXA)) *Aut(T e (A)) 



1 



The rows are exact, the maps on the top row being the natural ones. The nontrivial 
maps on the bottom row are inclusion into the first factor, and projection onto the 
second factor, respectively. The vertical arrows are all injections. For each n one 
has a corresponding diagram modulo £ n , with the vertical maps being K n ,uj n , and 
p n . Finally, for the remainder of the article we regard u as mapping into T^{A) X 
Aut(Ti(A)) , rather than into the full automorphism group of the tree Tg(a). 

Theorem 3.2. Let G = Gal (K^/F), and let T{G) be as defined on p. [^} Let A be 

the product of an abelian variety by a torus, <ft = [£], and assume the orbit of a G A(F) 
under \£] is Zariski dense in A. Then the set 



{p C Op : the order of a G A(f p ) is not divisible by £} 



has a Dirichlet density, and it is given by F(G) . 

Remark ((As pointed out to the authors by A. Perucca)). If the orbit of a is not 
dense in A, the result still holds in many circumstances. In particular, if A a is 
the smallest F-algebraic subgroup of A containing a, and the number of connected 
components of A a is prime to £, the result holds. One achieves this by replacing a 
with a multiple of itself to get that A a is connected, then applying [26, Proposition 
2.5] and proceeding with the proof below. In the case where the number of connected 
components of A a is divisible by £, it follows from [261 Main Theorem 1] that the set 
in Theorem \3.S\ contains only finitely many primes. 



Proof. We begin by noting that the hypothesis that the orbit of a is dense in A 
permits us to apply a theorem of Bertrand ([21 Theorem 2, p. 40]) showing that im«: 
has finite index in Te(A). 

Let Per(£, a) = {p C Of '■ [£ n ](&) = a for some n > 1}. Denote the order of 57 G 
A(fp) by m. We show that £ \ m if and only if a is periodic under £. If £ { m 
then £ G (Z/mZ) x , whence £ n = 1 mod m for some n. Thus [£ n ]a = a, whence a is 
periodic under £. Conversely, if [£ n ]a = a for some n, then [£ n — l]a = 0, whence £ 
cannot divide the order of 57. 
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Next, let Frobp denote the Frobenius conjugacy class at p in Gal (F sep /F), and let 
t Pi n denote its image in T n . Define 

NP n := {pcO: Frobp has no fixed points in U n } 

P n : = {pcO: Frobp has a fixed point in U n and det(t pn — id) 7^ 0}. 

By the Chebotarev density theorem, D(P n ) and D(NP n ) exist for all n > 1. We 
note that the extension K^/F is ramified over only finitely many primes, whence for 
all but finitely many p there is a well-defined action of Frob p on U m for all m > n 
(this will be used in the next paragraph). To prove finite ramification, it is enough to 
show that except for finitely many primes, the elements of U n remain distinct under 
reduction modulo p. This follows from the fact that reduction modulo p is injective 
on A[£ n ] for all n, except for finitely many p, a statement that holds for any connected 
abelian algebraic group (see [201 Lemma 4.4]). 

Next, it follows from the proof of Proposition 12.11 that the complement of Per(£, a) 
contains \J n>1 NP n . We claim that \J n>1 P n Q Per(£,a). Identify U n with A\l n \ via 
the map (3 n + 7 t— > 7, and note that under this identification Frob p acts on U n as 
tp,n + v, where t Pj7l G GL m (Z/£ n Z) and v = o((3 n ) — (3 n G A[£ n ] (see Proposition 13. ip . 
If p G P n for some n, then this action has a fixed point, so v G im (t p n — id). Since 
ord £ (det(t Pin - id)) < n, the Z/rZ-submodule im (t P) „ - id) has index £™Mdet(t P , n )) 
in v4[£ n ], and the same statement holds if n is replaced by any larger integer. Hence 
every lift of v to A[£ m ] for m > n must be in im (ip, m — id), and it follows that Frob p 
acts on Uk with a fixed point for all k > 1. By the first paragraph of the proof of 
Proposition 12.11 this implies p G Per(£,a). 

Finally, for fixed n, the set of p not belonging to P n or NP n is 

E n := {p G O : Frob p has a fixed point in U n and det(t PiTl — id) = mod £ n }. 
By the Chebotarev Density theorem, D(E n ) is given by 

• G Q n : g has a fixed point in U n and det(^|T n — id) = mod £ n }. 

itQn 

If det(g>|y n — id) = mod £ n , then the index of im (g\r n — id) in A[£ n ] is at least £ n . 
Hence 

G : ft,|r n = g\r n and /i has a fixed point in U n } < — ■ j^A\£ n \. 

£ n 

By [21 Theorem 2, p. 40], the subgroup of h G G with = has finite index 
m in Te(a). For n sufficiently large, this implies that #{h G Q n '■ h\x n = g\r n } = 
(1/m) • j^A\£ n \. We now have shown the proportion of h G Q n with h\r n = g\r n and 
that fix a point in A[£ n ] is at most m/£ n . It follows that D(E n ) < m/£ n . 
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This gives lim (D(P n ) + D(NP n )) = 1. Let L s denote the lim sup of the expression 

n— *oo 

in ([2]) for S = Per(£, a), and Lj denote the corresponding lim inf. Since {J n>1 P n Q 
Per(£,a), we have Li > lim D(P n ). Since the complement of Per(£, a) contains 

Un>i Np n, we have L S <1- lim D(NP n ). Hence L s = L i = \- lim D(NP n ). This 

— ra— >oo n^oo 

last expression is the same as □ 

We now work toward a theorem that will allow us to determine information about 
the image of u. If G is any profinite group, we let denote its Frattini subgroup, 

namely the intersection of all maximal open subgroups of G. Properties of the Frattini 
subgroup of T will be important for determining the image of uo. 

Theorem 3.3. If G < GLd(Z^) is a profinite group, then [G : $(G)] is finite. 

Proof. Let N < G be the kernel of the map G -> GL d (Z/£Z). Since $(iV) < and 
iV has finite index in G, it suffices to show that [N : $(iV)] is finite. For n > 1, let iV^ 
be the kernel of the map N -> GL d (Z/.TZ) and define 5 n : jV< n > /jV> +1 ) -> M d (Z/£Z) 
by 5n(s0 = ^^r- It is easy to see that 5 n is an injective homomorphism. This implies 
that N is a pro-£ group, and hence $(iV) = N'N £ . We will show that [iV : iV £ ] is 
finite. 

If g = I + fM, then 

^ = (t ) * = 1 + r+lM ( mod 

If £ > 2, then the above congruence holds modulo £ 2n+1 . It follows that for n > 2 or 
n = 1 and £ > 2, we have ^ G N^ n+1 ' and S n+ i(g l ) = S n (g). It follows that we have 
the increasing sequence 

5 n (iV (n) /iV (n+1) ) C 5„+i(iV (n+1) /iV (n+2) ) C • • • 

where all the groups are contained in M d (Z/£Z). Hence, there is some m so that the 
£th power map N^/N^ n+lS) — > N^ n+1 ^ / N^ 2 ' is surjective for n > m. This implies 
that if 5 e iV( m+1 ), then g can be written as a product of £th powers in every quotient 

N (m+1) I N (m+k) _ ^ that ^(n) form a bage for 

open neighborhoods of 

the identity then imply that $(iV) D iV* 3 jv^ m+1 \ and so $(iV) has finite index in 
iV, as desired. □ 

Our next goal is to develop criteria that will ensure that imw„ = A[£ n ] x T n . 

Theorem 3.4. Let the notation be as above. Suppose that for some m > 1 i/ie 
following hold. 

(1) A[£ m ]/A[£ m_1 ] irreducible as a T m -module. 



l2n\ 
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(2) a A(F) n £A(T n ) for all n>m. 
Then \vciu} n = A[£ n ] x T n for all n > m. 

Proof. Recall K n = Gal (T n ((3 n )/T n ) = imw n n A[£ n }. If (a,X) G A[£ n ] x T n , and 
(b, 1) G imcj n fl A[£ n ], one can compute that 

(a,X)(6,l)(a,X)- 1 = (X6,l), 

and hence /C n has the structure of a 7^-module. It suffices to show that JC n = A[£ n ] 
for n > m, since in this case, if (a, X) is an arbitrary element of A[£ n ] x T n then there 
is some (b, X) G imw n and (a — 6, 1) G K n and we have 

(a — 6, X) = (a, X) G imw„, 

and the desired result holds. 

To show that /C n = A[^ n ], we prove two things. First, if M < A[£ n ] is any T n - 
submodule, then either M = A[£ n ] or M < A[£ n ~ 1 }. Finally, we'll prove that K n < 
A[£ n_1 ] does not occur. 

We prove the first of the two statements above by induction on n. For the base 
case n = m, we have A[£ m ]/ A[£ m ~ l ] is irreducible as a 7^-module, and so the ho- 
momorphism M — > A[£ m ]/ A^™ 1 ' 1 ] is either trivial or surjective. In the first case, 
M < A\£ m ~ x \ and in the second, M contains a complete set of representatives of 
A\£ m \j A\£ m -\ The latter fact, together with the observation that £M < M implies 
that M = A[£ m }. 

Suppose now that n > m and M is a 7^-submodule of A[£ n ]. Then, £M is a T n -\- 
submodule of A\£ n ~ 1 }. Induction now implies that £M < A[£ n - 2 } or £M = A\£ n - 1 }. In 
the first case, M < A^ 11 " 1 }, while in the second the following commutative diagram 
with exact rows, together with the five- lemma, implies that M = A[£ n ]. 

► A[£] > M — Al? 1 - 1 ] »• 

»■ A[£] > A[£ n ] — A[£ n - 1 } > 

Finally, we will prove that K, n = A[£ n ]. We have the following diagram with exact 
rows: 

► A[£ n ] y A — A > 

»■ A[£] > A — A > 
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This gives rise to the following diagram with exact rows: 







* A(T n )/£ n A(T n ) 

i 

* A(T n )/£A(T n ) 



* H 1 



(T n ,A[£ n }) 
l (T n ,A[£}) 







♦ H 1 



Here 6 n (a) is the element of if x (T n , v4[£ n ]) represented by the 1-cocycle a t— > a(P n ) — 
P n . Since K n = Gal(T n (/3 n )/T n ), it follows that if K n < A[£ n_1 ], then S n (a) lies in 
the kernel of £ n ~ 1 : H l (T n ,A[£ n }) -> H l (T n , A[£]). This implies that ^(ot) = 0, which 
by the diagram above implies that a G A(F) fl £A(T n ). This contradicts the second 
assumption of the theorem. 

Thus, JC n = A[£ n ] and imw n = A[£ n ] x T n . □ 

We will see that in most cases, the conditions of Theorem 13 .41 are satisfied with m = 1. 
The next three lemmas will deal with establishing condition 2 of Theorem 13.41 under 
suitable hypotheses. 

Lemma 3.5. Suppose that A[£] is irreducible as a Ti-module, a G" £A(Ti) and a G 
£A(T n ) for some n > 2. Then F(P\) C T n and Gal (T n /F(Pi)) zs a maximal subgroup 



Proof. The assumption that a G" £A(Ti) implies that /?i G" A(Ti) and so Gal (K\/T\) = 
A[£] and & = Gal (K x /F) = A[£] x T x . ET t <N <Q X is any subgroup, then NnA[£] 
is a 7i-submodule, and hence N — T\ or N — Q\. Thus, 7i (whose fixed field is F(P\)) 
is a maximal subgroup of Qi, as desired. This implies that there are no fields that lie 
between F and F(p x ) and hence Gal (T n / F(Pi)) is a maximal subgroup of Gal (T n /F) 
for any n with F(Pi) C T n . □ 

Let iV (n) = Gal (T^/Tn). Via the embedding of T„ +1 -> GL d (Z/r +1 Z), we have that 
jyW /AT( n+1 ) = {M G 7; + i : M = 1 (mod £ n )}. The group %_ acts by conjugation on 
N(n) /N(n+i) and hence N (n) / N (n+i) hag the struc t ure of a Ti-module. 

Lemma 3.6. If n > 1 and Hom Tl (A^( n V^ n+1 ), = 0, t/ien n £A(T n ) = 
A(F)n£A(T n+x ). 

Proof. Suppose that a G A(F) fl £A(T n+x ). This means that p x G A(T n+ i), and 

<5i(a)(cr) = a (Pi) — Pi gives rise to a cohomology class in if 1 (T n+ i/F, A refined 
form of the inflation-restriction sequence gives an exact sequence 



> H\T n /F } A[£}) ^(WF,^) -^U H\T n+ i/T n) A[£]) 



H l (T n+ i/T n ,A[£]) Tn = Hom Tn (iV (n) /^ (n+1) , Afl) = Hom Tl (iV( n )/iV( n + 1 ), = 0. 



of Gal (T n /F). 



Now, Gal (T n+ i/T n ) acts trivially on and so 
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Thus, the inflation map is a bijection between H l {T n+ i/ F, A[£]) and iJ 1 (T n /F, A[£]). 
This implies that the cocycle S 1 (a)(a) is trivial for a G Gal (T n+1 /T n ) and this implies 
that f3i G A(T n ), as desired. □ 

Lemma 3.7. Suppose that there is a normal subgroup HofTi with order coprime to 
I and A[£\ H = 0. Then, A(F) n £A(T 1 ) = £A(F). 

Proof. Suppose that a G A(F) and f3\ G A(Ti). This gives rise to a cocycle Si(a)(a) = 
cr(Pi) — Pi that represents a cohomology class in i? 1 (-F, A[£\). We have the inflation- 
restriction sequence 

> H 1 (J X IH,A\£\ H ) > H l {T u A[£]) > H\H,A[£]). 

Because = 0, the first term is zero, and because A[£] has order a power of 

£, which is coprime to \H\, the last term is also zero. Thus, H l {T x , A[£\) = by 
exactness. 

We have another inflation-restriction sequence 

> H\T U A[H\) > H\F,A[£}) H\T U A[£\) 

and since H 1 (Ti, A[£\) = 0, it follows that the restriction map is injective. Since 
the restriction of 5\ to if 1 (71, A[£]) is zero, it follows that 5i is a coboundary and so 
(3i G F. ' □ 

The following result gives a convenient method of computing T{G) in the case that 
k is surjective, i.e. imcj = U\ x T. 

Theorem 3.8. Suppose that k is surjective. Then 

(4) T{G) = J r ord ^ (dct(M - 7)) dfi. 

Here, d\i denotes the Haar measure on T, normalized so that /x(T) = 1, and we take 
ord^(O) = oo. 

Proof. We will frequently use the fact that if X G M^Z^) acts on V = with 
det(X) ^ 0, then the image of X : V -»• V has index £ OTd «( dct (^)). Note that if 
det(M-J) = then by our convention that ord^(0) = oo we have £-°^(det(M-7)) = Q 

Suppose that a G Q n and u n (a) = (a, M) G {Z/£ n Z) d x GL d (Z/^Z). Then, if /3 G [/„, 
then a fixes /3 if and only if a((3) - f3 n = (3 - f3 n . Write (3 = /3 n + 7, where 7 G Aff 1 ]. 
Then, <r(/3) = cr(/3 n ) + (7(7) and so 

a{0)-p n = a{p n )-p n + a{ 1 ). 

The right hand side equals (3— (3 n if and only if a(f3 n )—f3 n +a(^) = 7. If co n (a) = (a, M) 
then this means that a + M(7) = 7, whence (M — J) (—7) = a. This occurs if and 
only if a is in the image of M — I. 
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If M G % with det(M - I) (mod f 1 ) and M is any lift of M to T, then 
ord^(det(M — /)) = ord^(det(M — /)) and therefore the index of the image of M — I 
(acting on (Zj/£ n Z*) d ) and the index of the image of (M — J) (acting on Uf) are 
the same. It follows that the index of the image of det(M - 7) is f*d,(det(M-/))_ 
Hence, the number of elements of Q n fixing some point of U n divided by the size of 
Q n = Gal (K n /F) is 

E MeTn # im ( M ~ J ) _ E' £ dn -°*Mdct(M-i)) #im (M - /) 

#r„ ■ i dn ~ #r„ • i dn + #r n ■ i dn ' 

where Yl' an d X] are taken over all M G T n with det(M — I) ^ mod £ n and 
det(M — /) = mod £ n , respectively. We may rewrite the first sum as 

I" r ord,(det(M-/)) 
i{MeT:det(A/-/)^0 (mod i n )} 

As n — > oo, this integral tends to 

y r ord,(det(Af-/)) 

and the second term tends to zero. This establishes (@J. □ 



4. Tori 



The multiplicative group scheme G m = Spec Z[x,y]/(xy — 1) is one of the simplest 
examples of an algebraic group. An algebraic torus A of dimension n is an algebraic 
group that is isomorphic to GJ^ over _F sep . If F is a number field, then there is a 
bijection between algebraic tori of dimension n up to F-isomorphism and 

'(Gal (F/F), Aut F (G£J) Hom cont (Gal (F/F), GL n (Z)). 

In the special case n = 1, GLi(Z) = Z/2Z and Hom cont (Gal (F/F),Z/2Z) ^ F X /(F X ) 2 . 
It follows every dimension 1 torus is isomorphic to one of the form 

x 2 - dy 2 = 1 

for some d G F x /(F x ) 2 , where the group law is given by 

(xi, y x ) * (x 2 , y 2 ) = (xix 2 + dy x y 2 , x x y 2 + x 2 y x ). 
For such tori, we have the following surjectivity criteria for the £-adic representation 
P- 

Proposition 4.1. Let t be a 'prime. The i-a&ic representation p : — > Z* is 
surjective if and only if the following conditions are satisfied: 

(1) We have \F(Qs + Q 1 ) : F\ = 

(2) If £ = 3 (mod 4), then —id is not a square in F. 
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(3) If £ = 2, then —d and —2d are not squares in F. 
Proof. Note that the coordinates of the £ n torsion points on A are given by 

/ Cl" + (in Ci n - Cm 1 \ 

V 2 ' 2 Vd J' 
Assume first that i > 2. Since the square of e2 2 A 2 is in F(Q? + C^ 1 ), an d 
\F(A[f]) : F\ = \F(A[f}) : Ffo + tfWfo + &) : F|, 

condition (1) above is necessary. The maximal subgroups of Z^ are those that contain 
the kernel of reduction mod £, together with the unique subgroup of index I in Z^ . 
The first condition above rules out the possibility of the image of p landing in this 
second subgroup, and so it suffices to determine when the mod £ Galois representation 
is surjective. Let L = F(Q, y/d) and define : Gal (L/F) -> F* x Z/2Z by 0(a) = 
(a\fj, t ,a(y/d)/y/d). If is surjective, then there is an element a G Gal (L/F) so that 

cr((e) = Q 1 an( i o-(Vd) = \fd. This element a fixes Q + Q 1 , but it sends to 

its negative. Thus, £ F(0 + C^ 1 ) and so \F(A[£\) : F(Q + C^ 1 )! = 2 and we 

have that |F(A[£]) : F\ — £ — 1 and so p is surjective. 

Suppose therefore that is not surjective. Condition (1) implies that \F(Q + Q 1 ) : 
F\ = ^ and so the image of has index at most 2. There are three subgroups of 
F* x (Z/2Z) of index 2, and they are {(a, 1) : a G F^}, {(a 2 ,±l) : a G F*} and 
{(a, (f)):aGF*}. 

In the first case, \fd is fixed by Gal (L/F) and so \fd G X. In this case, = 
F(Q), and since \F(Q) : F\ = £ — 1, p is surjective. 

In the second case, \F(Q) : F\ = (£ - l)/2. Here we have = v 7 ^) and 

this has degree £ — 1 over F and so p is surjective. 

In the third case, Vd G and \F(( e ) : F| = £ - 1. If G F(0 + C^ 1 ), then 

= F(^) and p is surjective. If not, then £ = 3 (mod 4), — £rf = a 2 for some 
a G F, and we have that 

Cg - C 1 = Ce - Cj 1 

2Vd 2ay/-l/£ 
lies in F(Q + Q 1 )- In this case, |F(A[£]) : F\ = and p is not surjective. 

For £ = 2, one computes that F(A[8]) = F(y/2, y/—d). It follows then that p is 
surjective if and only if |F(A[8]) : F\ = A. This occurs if and only if 2, — d and —2c? 
are not squares in F. Since F(( 8 + C^ 1 ) = F(\ / 2), condition (1) guarantees that 2 is 
not a square in F. □ 
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Next, we have the following surjectivity criteria for the Kummer map k. 

Theorem 4.2. Let A : x 2 — dy 2 = 1 be a one- dimensional torus over F and let 
a G A(F). Assume that the t-adic representation on A is surjective. The Kummer 
map k : Gal(F/T 00 ) — > Zg is surjective if and only if the following conditions are 
satisfied: 

(1) a££A(F). 

(2) If I = 2, assume that F{f3 x ) £ F(A[8]). 



Proof. The necessity is clear since either of the above two conditions will force the 
image of « to have index a multiple of £. 

First assume I > 2. The hypotheses of Lemma 13.71 are satisfied with H = T\ = 
(Z/£Z) X . Moreover, N^/N^ 1 ^ is one-dimensional with the trivial action, while 
A[£] has the non-trivial action. Thus, the hypotheses of Lemma 13.61 are satisfied. 
Theorem 13.41 now implies that k is surjective. 

If t = 2 and ft £ 2A(T n ) for some n, then Lemma [33] implies that F(J3i) C F(A[8]). 
This contradicts the hypothesis. Hence, ft 2A(T n ) for any n, and Theorem 13.41 
implies that k is surjective. □ 



As a consequence we obtain conditions for the surjectivity of uj. 



Corollary 4.3. The arboreal representation uj : Gal (K^/F) — > Z^ x Z^ z's surjective 
if and only if the conditions of Theorem\4-2\ and Proposition^. 1\ are satisfied. 



Proof. It is clear that uj is surjective if and only if k and p are surjective. □ 

Example 4.4. Suppose that F = Q andd = 1. In i/ws case, x 2 — y 2 = 1 is isomorphic 
to G m over Q. If £ > 2 and a = (xo,yo) & £A(Q), then Theorem \4-2\ and the 
above remark demonstrate that G = Gal (K n /F) = Z^ x Z£. Moreover, one verifies 
directly that the same conclusion holds for £ = 2 as long as the corresponding point 
(7,1/7) = \ ^s±Mo ; xo-yo \ on x 'yi _ ]_ satisfies condition (2) of Theorem \4-2\ In this 
case, Q(A[8}) = Q(( 8 ) and Q(ft) = Q(j*f). Since the quadratic subfields of Q(Cs) 
are Q(v / 2), <™<^ Q(V — 2), t/ws z's equivalent to none o/±7 or ±27 freing squares 

in Q. 

Proposition 4.5. Suppose that £ is prime, and G = Z^ x Z* . Then, 
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Proof. We will apply Theorem 13.81 Representing elements of Z* with their £-adic 
expansions, we obtain 



(5) fi({x G Z* : v e (x - 1) = n}) 

The integral in (T4J) is therefore 

I- 1 + ^£2fc - £_ 1 + 



(£-2)/(£-l) ifn = 
l/£ n if n > 1. 

-2 1 £ 2 - £ + 1 



.-1^-1 £ 2 - 1 

fe=i 



□ 



Returning to Example 14.41 we see that in the case A = G m , F = Q, we have J~{G) = 
{£ 2 - £ - l)/{£ 2 - 1) for general (7, 1/7) G G m (Q). More specifically, if 7 G Q is 
neither plus or minus a square nor twice a square, the density of p such that the order 
of 7 G (Z/pZ) x is odd is 1/3. Similar results were first proved by Hasse [TU], [TT] ; 
see [25] for a complete accounting. For instance, Hasse showed that the density of 
primes p dividing 2 n + 1 for some n is . Note that p \ 2 n + 1 for some n if and only if 
2 n = — 1 (mod p), that is if and only if (2, 1/2) has even order in G m (¥ p ). Similarly, 
Lagarias' result [22] about primes dividing the nth Lucas number L n follows from our 
results above since it is easy to see that p divides some L n if and only if the point 
(3/2, 1/2) on A : x 2 — 5y 2 = 1 has even order in A(F P ). Finally, [9], contains a study 
of primes that divide sequences of the shape ai = t 2 — t — 2, a n = (a n _i + 1) 2 — (2 + 1). 
The nth term a n comes from a = (t, u) on A : x 2 — dy 2 = 4, where d and u are chosen 
so that d is squarefree and t 2 — 4 = du 2 . In particular, 

a n = x([2 n }(t lU ))-t. 

A prime p divides a n if and only if x([2 n ](t, u)) = t (mod p). This occurs if and only 
if (t, u) has odd order mod p. 

Example 4.6. Suppose that F = Q, d = -7, £ = 7 and a = (3/4,1/4). In this 

( I '34. f^7\ 1/7n \ 

case, one can show that K n is the unique real subfield of Q I £7™, ( — ^ — ) I and 

[F n : F] = 3 • 7 2n_1 . The density in this case is J~{G) = less than the density of 
|| that would be obtained if Proposition \4^5\ applied. 

The situation becomes more complex when we consider tori A with A = G m x G m over 
the algebraic closure of F. We will content ourselves with considering two examples. 

Example 4.7. Suppose that F = Q, A = G m x G m is given by A : xyz = 1. Let £, p 

and q be distinct primes and consider multiplication by £ with a = (p,q, —). In this 

case, F n = Q(C^,p 1/r \ q 1/e ") and Q n = (Z/£ n Z) 2 x (Z/rZ) x ; so that u is surjective. 
One can compute that J~(G) = ^—wEj-^ ■ 
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Example 4.8. Let F = Q, and let A be defined by 

l = x 3 + 2y 3 + Az 3 - 6xyz = N Qm/Q (x + y^+ z$l). 

We take £ = 2 and a = (— 1, 1, 0) . In this example, A = G m x G m over L = Q( \/2, C3) ■ 
One can show that F n = Q(( 3 , ( 2n , (^2 - l) 1 / 2 ", (( 3 ^/2 - l) 1 / 2 ™). Then, 

g n S (Z/2"Z) 2 x (S 3 x (Z/2 n Z) x ), and F(G) = 67/168. 

5. Elliptic Curves 

5.1. Elliptic curves without complex multiplication. Suppose that A/F is an 
elliptic curve without complex multiplication, F is a number field, = [£], and 
a e A(F). 

To determine the image of u, we need to determine both the image of the Rum- 
mer map k : Gal (K^/T^) —* T^(A) = Z| and the image of the associated £-adic 
representation p : T — > GL 2 (Z£). 

We treat the torsion part first by giving criteria for p : T — > GL^Z^) to be surjec- 
tive. This problem has been well-studied. In particular, in [32] it is shown that p is 
surjective provided £ is large enough. 

Recall that the n-torsion polynomial of an elliptic curve E : y 2 = x 3 + Ax + B is the 
polynomial whose roots are the x-coordinates of the points of order n in E(F). 

Proposition 5.1. Let £ be a prime. The £-adic representation p : GdKT^/F) — > 
GL^Z^) is surjective if and only if the following conditions hold: 

(1) The base field F is linearly disjoint from Q(0™) for all n. 

(2) Ti = GL 2 (Z/£Z). 

(3) If £ = 2 and D is the discriminant of the 2-torsion polynomial, then —D, 2D 
and —2D are not squares in F , and the 4-torsion polynomial is irreducible 
and its Galois group has order 48 over F. 

(4) If £ = 3, then the 9-torsion polynomial is irreducible over F^q). 

Proof. Serre [33] [IV, 3.4, Lemma 3] shows that if £ > 5, then no proper closed 
subgroup of SL 2 (Z^) surjects onto SL 2 (Z/£Z). From the formula 

detp(Frobp) = xe(p), 

where xe is the £-adic cyclotomic character, we see that p\G&\(F (eoo /F) surjects onto 
SL 2 (Z£) if and only if the map p\f(q) surjects onto SL 2 (Z/£Z). The linear disjoint- 
ness of F with Q((e n ) implies that det p : Gal (Too/ F) - > 2^ is surjective. This 
demonstrates that conditions (1) and (2) are necessary for any £ and sufficient for 
£ > 5. 
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For t = 3, the proof of Theorem [331 shows that $(GL 2 (Z 3 )) D N&\ where iV (fc) = 
ker(GL 2 (Z^) — > GL 2 (Z/£ fc Z)). A computation then shows that there are five maximal 
subgroups of GL 2 (Z/9Z) with indices 2, 3, 3, 4, and 27, respectively. The maximal 
subgroups of index 2, 4, and one of those with index 3 correspond to the maximal 
subgroups of GL 2 (Z/3Z) = £4. The other maximal subgroup of index 3 is 

{M G GL 2 (Z/9Z) : det(M) = ±1 (mod 9)}. 

To ensure the image of p does not lie in the maximal subgroup of index 3 described 
above, it is necessary and sufficient to assume that F is linearly disjoint from Q(Cg). 
The maximal subgroup of index 27 is generated by 



"0 1 




"2 5" 


5 8 




5 6 



Its intersection with SL 2 (Z/9Z) has order 24. The 9-torsion polynomial is irreducible 
over F(£q) if and only if (imp 2 ) PI SL 2 (Z/9Z) acts transitively on the ^-coordinates 
of the 9-torsion points. If the image of p lies in the maximal subgroup of index 27, 
then it cannot act transitively on the 36 ^-coordinates, since the order of the group is 
only 24. On the other hand, if p 2 is surjective, then since SL 2 (Z/9Z) acts transitively 
on elements of order 9 in (Z/9Z) 2 , it follows that Gal(F(A[9})/ F) acts transitively 
on the elements of order 9 in A[9], and hence on roots of the 9-torsion polynomial. 
Thus, a necessary and sufficient condition for p to be surjective is that the 9-torsion 
polynomial is irreducible over F((g). 

For I = 2, the proof of Theorem 13.31 shows that $(GL 2 (Z 2 )) D N^ 3 \ A computation 
then shows that there are 9 maximal subgroups of GL 2 (Z/8Z). Seven of these have 
index 2, one has index 3, and one has index 4. 

To guarantee that the image of p does not lie in one of the subgroups of index 2, it 
is necessary and sufficient that F(y2), F(i), and the quadratic subfield of F(v4[2]) 
are three independent quadratic extensions of F . This is guaranteed by the condition 
(1) and the first part of condition (3), since -F(Cs) Q -^(^[8])- To guarantee that the 
image of p does not lie in one of the subgroups of index 3, it is necessary and sufficient 
that 3|[.F(v4[2]) : F], which is guaranteed by condition (2). 

The maximal subgroup of GL 2 (Z/4Z) of index 4 is generated by 



Note that if A is written in the form A : y" 2 



X' 



+ ax + b then the action of [— 1] 



on (x,y) is (x,y) 1— > (x, —y). Hence, the Galois extension obtained by adjoining the 
x-coordinates is the image of p 2 in GL 2 (Z/4Z)/ (±7). In the case that p 2 is surjective, 
it has order 48, while in the case where the image of p 2 is contained in the maximal 
subgroup of index 4 (and all the other conditions of the theorem are met) it has order 
12. □ 
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Remark. There are modular curves of genus zero that parametrize the elliptic curves 
E /Q for which the modi representations are surjective, but the modi 2 representations 
are not. In [7\, Elkies computes this parametrization for i = 3 and gives the first 
examples of curves E/Q for which the mod 3 representation is surjective but the mod 
9 representation is not. The CM elliptic curve y 2 + y = x 3 is the smallest conductor 
curve for which the mod 2 representation is surjective, but the mod 4 representation 
is not. 

Theorem 5.2. Suppose that the i-adic representation p : GaltT^/i* 1 ) — > GL 2 (Z^) is 
surjective. Then the Kummer map k : Gal (K^/T^) — > Z 2 is surjective if and only if 
the following conditions hold: 

(1) The point a £ £A(F). 

(2) Ifi = 2, F((3i) % F{A[4 C \). 

Proof. It is clear that if either of the stated conditions fails to hold, then k fails to be 
surjective. 

Assume that i > 2 and a & IA(F). Then, H = Z(%) = (Z/iZ) x is a normal 
subgroup of Ti with order coprime to i and with A[£] H = 0. Thus, Lemma I3T1 
implies that A(F)niA(T 1 ) = £A(F). Next, N^/N^+V is isomorphic to M 2 (¥ e ) as a 
7i-module with the conjugation action. This decomposes as a direct sum of a three- 
dimensional and a one-dimensional 7i-module, and hence Homrj (N^ /N^ n+1 \ A[i]) = 
0. Thus, Lemma EH implies that A(F) n iA(T n ) = A(F) n £A(T n+1 ) for all n > 1. 
It follows that for any n > 1, A(F) H iA(T n ) = iA(F). Finally, the surjectivity of 
p implies that A[i] is irreducible as a Tj-module. Thus, Theorem 13.41 implies that 
imcj n ^ A[i n ) x GL 2 (Z/rZ) for all n > 1. 

When I — 2, again we have that A[i] is irreducible as a 7^-module. Thus, Lemma [331 
implies that if F(f}\) C T n , then Gal (T n / F(/3i)) is a maximal subgroup of T n . The 
condition that F((3i) £ F(A[2]) implies that Gal(Kx/F) = (Z/2Z) 2 x GL 2 (Z/2Z) 
and that \F(/3i) : F\ — 4. Since the only maximal subgroup of index 4 of GL2(Z 2 ) 
contains iV*- 2 ) = kerp 2 , h follows that if F{(3\) C T„ for some n, then F{(3\) C T 2 . 
This contradicts the hypotheses of the theorem. Thus, F{(3i) ^ T„ for any n and 
Theorem [331 gives imw n = x 7^ for all n > 1. □ 

Remark. The condition that F(f3\) <2 -^(^[4]) is necessary. In particular, if A : 
y 2 + y = x 3 — 3x + 4 and a = (4, 7), then p is surjective, but F({3i) C F(A[4]). 

Corollary 5.3. The arboreal representation uo : Gal (Koo/F) — > (Z^) 2 x GL 2 (Z^) 
zs surjective if and only if the conditions of Theorem \5.2\ and Proposition I5.il are 
satisfied. 

Proof. The necessity is clear. The sufficiency follows from the basic fact that if N <G 
and M C G is a subgroup with M n iV = iV and M/iV = G/iV, then M = G. □ 
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Example 5.4. Let A : y 2 + y = x 3 — x. Then A is an elliptic curve of conductor 



37. In [32] (pg. 310, 5.5.6), it is shown that GaX(Q(A[£])/Q) S GL 2 (Z/£Z) for all 
£. It is also known that a = (0, 0) is a generator of E(Q) = Z. One can check 
that the 9-torsion polynomial is irreducible over Q(Cg), and this implies that the uo 
representation is surjective for £ > 2. For £ = 2, one can check that the 4-torsion 
polynomial has Galois group of order 48, and that the discriminant of the two-torsion 
polynomial is 592. Further, Frobenius at 19 acts on K\ with order 4, while it acts on 
Q(A[4}) with order 2. It follows that K\ % Q(A[4]) ; and hence the u representation 
is surjective for all i. 

Now we turn to the problem of computing the density T{G) in the situation that to 
is surjective, i.e. Gal (K^/F) = (Z £ ) 2 x GL 2 (Z e ). 



Theorem 5.5. // 



I 



is the normalized absolute value on then we have 



det(M-/)|7 1 d/i 



GL 2 (Z«) 



+ 1 



Proof. It is necessary to count the number c n of matrices M e GL 2 (Z,/£ n Z) with 
det(M-J) = (mod £ n ~ l ) but det(M-J) ^ (mod £ n ). Then the desired integral 
is 

oo 

^ ^- 1 #GL 2 (Z/£«Z)' 

First, we compute c\. This is the number of matrices M G GL 2 (F£) so that M — I 
is invertible, that is, 1 is not an eigenvalue of M. We will first count the number 
of matrices in GL 2 (F^) that do have 1 as an eigenvalue. This implies that the other 
eigenvalue is in and hence M has a Jordan form over F^. It follows that M is 
similar to one of 



"1 0" 


, A ^ 1, or 


"1 f 




"1 0" 


A 


1 


, or 


1 



The size of the conjugacy class is the index of the centralizer. We can easily compute 



that the centralizer of the first matrix is 



a 
b 



which has size (£ 



The 



centralizer of the second matrix is 



a b 
a 



which has size £(£—1), and the centralizer 



of the third matrix is GL 2 (F£), which has order (£ 2 — 1)(£ 2 — I). It follows that 



Cl = #GL 2 (F £ ) - £{£ + l)(e-2)-{£- l){£ + 1) 



2t 



+ 3£. 



For n > 2, we pick a matrix M 



a b 
c d 



G GL 2 (F^) and count how many M G 



GL 2 (Z/rZ) there are with M = M and det(M-J) = (mod £ n ~ v ) but det(M-J) ^ 
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(mod £ n ). Write 

M-I= \ a f . 

7 o 

The condition that det(M - I) = (mod f 1-1 ) but det(M - J) ^ (mod £ n ) is 
equivalent to the existence of % G (Z/£ n Z) and e G (Z/£Z) X so that 

«5 = z + e£ n ~ l (mod T) 

/3 7 = i (mod T). 



Hence, the number of such M is 

i-i e n -i 

J2J2^ a ^y- a6 = t + e£n ~ 1 (modr),a = a-l (mod£),5 = rf-l (mod £)} 

e=l i=0 

■#{(/?, 7) : p-y = i (mod = 6 (mod£), 7 = c (mod £)}. 

We use the following simple lemma to compute the quantities that appear in the 
above expression. We omit the proof of the lemma. 

Lemma 5.6. Suppose that a, b G Z/£Z ; c G Z/£ n Z, and n > 2. Then, the number of 
pairs (a, /3) G (Z/£ n Z) tyit/i a/3 = c (mod £ n ) with a = a (mod £) and /3 = b (mod €) 
is 

ab ^ c (mod £) 

£ n_1 ab = c (mod and one o/a or b is nonzero. 

(£ - l)(ord^(c) - l)^- 1 a = b = c = (mod £), c ^ (mod f 1 ) 
^(n£-n-£ + 2)r- 1 a = 6 = c = (mod£),c = (mod f 1 ). 

If M ^ / (mod £) but M has one as an eigenvalue, a straightforward computation 
using Lemma [5.61 shows that there are (£ — l)£ 3n ~ 3 matrices M G GL 2 (Z/£ n Z) with 
ord^(det(M - /)) = n - 1 for each M G GL 2 (F^). There are £ 3 - 2£ - 1 matrices that 
fall into this case. 

If M = / (mod £), a more lengthy computation using Lemma 15.61 shows that there 
are 

(£ 2 - l)£ 3n ~ 3 - [£ 2 - l)£ 2 
matrices M in GL2(Z/£ n Z) with ord£(det(M — /)) = n — 1. Hence, we have 

c n = (£- 1) 2 (£ + IK 3 ™" 2 - (£ 2 - l)£ 2n -\ 
Hence, we may split up 

oo 

(">1 



5^ pn-1 



n=l 



#GL 2 (Z/^Z) 
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as a sum of two geometric series, and we get 

£ 5 - 1 - e + 1 + 1 



HG) 



-£ 3 -£ 2 + l ' 

□ 



5.2. Complex Multiplication. Suppose that A is an elliptic curve defined over a 
number field F, and that A has complex multiplication. Then End-p(A) = R, where 
R is an order in an imaginary quadratic field L. Suppose first that L C F, and put 
Re = R® Z t . Let T = Gal^/F), so that the action of T on A[£°°} gives the 
£-adic Galois representation associated to A. Then T is known to be isomorphic to 
a subgroup of R£ , provided that £ does not ramify in L or divide the index of R in 
the maximal order of L (see e.g. [3U p. 502]). We also have the analogue of Serre's 
open image theorem, namely that for any £, T must have finite index in R£ and in 
fact T = Rf for all but finitely many £ |52l p. 302]. 

A subgroup of GL 2 {'Lg) that is isomorphic to Rf is called a Cartan subgroup, which 
we denote by C. In the case where L % F, we have that T is a subgroup of the 
normalizer iV of some Cartan subgroup C, which contains C as a subgroup of index 
two. Indeed, [T : TnC] = [L : Fnl] =2, and thus T is the normalizer of its image 
inC. 

We begin by addressing the image of p. 

Proposition 5.7. Let A be an elliptic curve defined over a number field F , and 
suppose that the image of p : T — ► GL>2(%e) is contained in the normalizer N of a 
Cartan subgroup but not in a Cartan subgroup. Denote by N m the image of N in 
GL 2 (Z/£ m Z). If£>3, then p maps onto N if and only if % = N 2 . For £ = 2, the 
same conclusion holds if and only ifT 3 = N 3 



Remark. Proposition\5. 7| also holds in the case where the image of p is contained in 



a Cartan subgroup C , with analogous conditions ensuring that p maps onto C . 

Proof. The only if direction is trivial. Let C be the Cartan subgroup of N, and 
suppose that T 2 = N 2 (T 3 = N 3 for £ = 2). Denote by C m the image of C in 
GL 2 (Z/£ m Z), and recall C = (_R®Z^) X , where R is an order in an imaginary quadratic 
number field. Thus T n C surjects onto C 2 (C 3 if £ = 2). We will show that this 
implies TnC surjects onto C/$(C), where $(C) is the Frattini subgroup of C. It 
follows that T PI C = C, and since T is not contained in C this shows T = N . 

To determine 3>(C), first note that if S is the valuation ring in an unramified extension 
of of degree d, then the £-adic logarithm gives an isomorphism S x = F* d x S if £ > 3 
and S x = Z/2Z x F £ x d x S if £ = 2, where ¥ £d is the finite field with £ d elements [301 
p. 257]. Since £S is the Frattini subgroup of S, it follows that the log of any maximal 
subgroup of S x must contain £S, whence log $(S' X ) D £S. Under the log isomorphism, 
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£S corresponds to {x e 5 X : x = 1 mod £ 2 } if £ > 3 and {x G S' x : x = 1 mod £ 3 } if 
1 = 2. Thus if G < S x and G has full image in {S/£ 2 S) X \{S/£ 3 S) X if £ = 2) then G 
surjects onto S x /3>(S X ) and hence G = S x . 

If £ is inert in R, then i?^ is isomorphic to the valuation ring in an unramified quadratic 
extension of Qi, and the result is proved by the previous paragraph. If £ splits in R, 
then R^ = Z x t x Z x t , and we have log$(i? £ x ) Dffix £Z. The proof then follows as in 
the previous paragraph. □ 

Theorem 5.8. Let A be an elliptic curve defined over a number field F , and suppose 
that the image of p : T — > GL 2 (Zi) is the full normalizer N of a Cartan subgroup. 
Suppose further that we are not in the case where £ = 2 and the underlying Cartan 
subgroup is split. Then the Kummer map k : Gal [K^/T^) — > Z 2 is surjective if and 
only ifacg £A(F). 

Proof. The only if direction is trivial. For the other direction, assume first that N is 
the normalizer of a Cartan subgroup C, excluding the case where C is split and £ = 2. 
We apply Theorem 13.41 with m = 1. The first hypothesis of Theorem 13.41 is satisfied 
since a computation shows that Ti acts irreducibly on A\i\ (indeed, transitively when 
C is non-split). 

To verify the second hypothesis of Theorem 13.41 with m = 1, we first apply Lemma 
13.71 with H = C\, the reduction modulo £ of C. This works since C% has order 
£ 2 — 1 in the non-split case and (£. — l) 2 with £ > 2 in the split case, and clearly 
y4[^] Cl = 0. We may also apply Lemma [3.61 for all n > 1, since the two-dimensional 
module JV' n ' / 'N^ n+1 ' has a one- dimensional submodule (namely that generated 
by the multiplicative identity matrix), while the two-dimensional Tj- module A[£] is 
irreducible. Theorem 13.41 now applies to prove the theorem. □ 

Remark. In the setup of Theorem \5.8\ when £ = 2 and the underlying Cartan sub- 
group is split, T m does not act irreducibly on A\£ m \j A\£ m ~ x \ for any m, meaning we 
cannot apply Theorem \3.4\ However, we can obtain the conclusion of Theorem \5.S\ 



under the stronger assumption that [Ts(f3i) : T3] =4. Indeed, a computation of the 
Frattini subgroup of Z| shows that if k is not surjective then [T n (/3i) : T n ] < 2 for 
some n. This implies that Ti(/3i) D T n contains a degree-two (and therefore minimal) 
subextension of T^/Ti. It follows from the proof of Proposition 5.1 that such an 
extension lies in T 3 , and one deduces [T 3 (f3i) : T 3 ] < 2. 

The following corollary has the same proof as Corollary 15.31 

Corollary 5.9. Let N be as in Theorem \5.8\, and let £ > 3. The arboreal repre- 
sentation uj : Gal (Kca/K) — > (Ze) 2 x\ N is surjective if and only if the conditions 
of Theorem \5.S\ and Proposition \5.7\ are satisfied. When £ = 2 the conditions of the 



above remark are equivalent to the surjectivity of uj. 
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Now we compute the densities J~{G) in the CM case. 

Theorem 5.10. Let C be a Cartan subgroup o/GL^Z^), and let G = Z| XI C with 
the natural action. Let h(x) = (x 2 — x — l)/(x 2 — 1). Then T{G) = h{£) 2 if C is 
split and h(£ 2 ) if C is inert. If G = Z 2 x iV ; where N is the normalizer of a Cartan 
subgroup, then F{G) = (h(£) 2 + h(£))/2 in the split case and (h(£ 2 ) + h(£))/2 in the 
inert case. 

Proof. Let fi be the Haar measure, and suppose first that C is not-split, whence 
C = Rf , where Re may be taken to be the valuation ring in an unramified quadratic 
extension of Qg. By Theorem 13.81 to find J-{G) it is enough to compute t n := ji{{x G 
R% : Vg(x — 1) = n}) for each n > and then evaluate the integral in PJ. Since £ is a 
uniformizer for Re and the residue field has order £ 2 , we have to = {£ 2 — 2)/(£ 2 — 1). 
When n > 1, for x — 1 to have valuation precisely n its £-adic expansion must have 
constant term 1, order-i term for 1 < % < n — 1, and order-n term non-zero. Thus 



for n > 1, t n = l/{£ 2 - 1) • l/£ 2i - n -^ ■ [£ 2 - l)/£ 2 = l/£ 2n . The integral in ® is 



and this last expression is just h(£ 2 ). 

Now suppose that C is split, whence C = Z f x xZ f x . In this case the Haar measure on 
C is just the product of the Haar measure fi on each copy of . The expression for 
6 Z f x x Z x : ve(x — 1) = n}) thus has n + 1 terms, since the valuations of the 
two coordinates of x — 1 must sum to n. From ([5]) it follows that for n = we get a 
measure of (£ — 2) 2 / (£ — l) 2 , while for n>la short computation shows the measure 
is 



and after evaluation of these sums one obtains (£ A — 2£ 3 — £ 2 + 2£+l)/ (£ 2 — l) 2 , which 
is equal to h(£) 2 . 

We now consider the case G = Z 2 x N, where iV is the normalizer of a Cartan 
subgroup. We have [N : G] — 2, and thus we need only determine the integral in (jl]) 
on the non-identity coset of C in N. When C is non-split, let 7 G Re be such that 
Re = 7LiYl\ with x 2 + cx + d the minimal polynomial of 7. Note that ord^'c) = 0. We 
thus have in the split and non-split cases, respectively, that the non-identity coset of 



therefore 




n=l 




The integral in (jlj) thus becomes 
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C in N consists of all 



M = 



' 


a 


M = 


a bd — ac 









b 


b —a 



In the former case we have det(M — I) = 1 — ab and in the latter det(M — I) = 
1 — (a 2 — abc + db 2 ). The maps (a, b) i— > a& and a + 67 t— > a 2 — a&c + db 2 define 
homomorphisms 0i and 02 mapping i?^ — > Z^ in the respective cases (02 is the norm 
homomorphism) . Both X and 02 are surjective for £ > 3, as their images properly 
contain the squares in Zf. For £ = 2 the surjectivity of 0i is clear, while for 02 it 
is useful to take 7 = £3, so that c = d = 1. Then im02 contains the squares and is 
surjective on (Z/8Z) X , and thus is surjective. The sets {x G Re : ord^l — 0i(x)) = n} 
all have the form 0^ 1 (S'), where S is defined via congruence conditions modulo £ n+1 . 
Since the 0j-preimage of any congruence class modulo £ n+1 contains the same number 
of classes, it follows that /i(0~ 1 (S')) = /x(5), where the first measure is the Haar 
measure on Rg and the second is that on Z£. Therefore finding the integral in (j3J) 
reduces to the same computation as in Theorem 14.51 which comes to h(£). □ 

Example 5.11. Let F = Q, A : y 2 = x 3 + 3x, a = (1,-2) and £ = 5. The 
elliptic curve A has CM by the full ring of integers 1t[i] in L = Q(i), and 5 splits in 
Z[i]. One can compute the Mordell-Weil group A(Q) and check that a is a generator. 
Hence a £ £A(Q). Next, we will show that Gal (Q(A[25])/Q) = N 2 , which has order 
800. If X is a prime ideal above 5, one can explicitly construct a point P G A[X] 
that lies in a degree 4 extension of L. This shows that the natural homomorphism 
Gal (L(A[X])/L) — > (Z[z]/A) x is an isomorphism, and therefore Gal(L(A[X])/L) is 
cyclic of order 4- Moreover, the quadratic subfield of L(A[X])/L is ramified at X. 

Explicit class field theory (see Theorem 2.5.6 0/(35]^ shows that the extension obtained 

by adjoining the squares of the x-coordinates of A[X 2 } to L has degree 5. Let M\ be the 

compositum of the extension obtained by adjoining the squares of the x-coordinates of 

A[X 2 ] and all coordinates of the points in A[X). From above, we have \M\ : L\ = 20, 

and that every subextension of Mi is ramified at X. Let X be the other prime above 

5, and let M 2 be the extension obtained by adjoing all coordinates of points in A[X), 

2 

and the squares of the x-coordinates of points in A[X }. Similarly, \M 2 : L\ = 20 and 
every subextension of M 2 is ramified at X. 

Since Z[i] has class number one, L has no unramified abelian extensions and hence 
Mi n M 2 = L and \M X M 2 : L\ = 400. Now, M 1: M 2 C L(A[2$\), and the natural 
map Gal(L(A[25])/L) -> (Z[z]/25Z[z]) x is mjectwe. Since |(Z[i]/25Z[z]) x | = 400, 
it follows that the above map is surjective, and M X M 2 = L(A[25]). Finally, since 
Q(A[25]) is generalized dihedral overQ, it contains L and hence \Q(A[2B]) : Q| = 800, 
as desired. 

Thus the hypotheses of Theorem \5.8\ are satisfied, and we conclude by Theorem \5.10\ 
and Theorem\£Mthata has order prime to 5 for ((19/24) 2 + 19/24)/2 = 817/1152 ps 
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0.71 of primes p. Compare this to the generic value of 2381/2976 ~ 0.80 in the 
non-CM case. 

Example 5.12. Let K = Q, A : y 2 = x 3 + 3, a = (1,2) and 1 = 2. The elliptic curve 
A has CM by Z[£ 3 ] ; a is a generator of the Mordell-Weil group of A, and 2 is inert in 
Z[C 3 ]. We will show that Gal (Q(A[8])/Q) = N 3 , which has order 96. It is easy to see 
that Q(A[2]) = Q(Cs, (-3) 1/3 ). Thus, 3 divides |Q(A[8]) : Q| and L C Q(A[8]), where 
L = Q(Cs)- Explicit class field theory predicts that the extension M of L obtained by 
adjoining the cubes of the x-coordinates of points in A[8] has degree 8. Further, this 
extension is only ramified at 2, and hence every subextension of M is ramified at 2 
since L has no unramified abelian extensions. 

In addition, the ^-torsion polynomial is x 6 + 60x 3 — 72. Therefore if a is the cube 
of the x-coordinate of a ^-torsion point, then a 2 + 60a — 72 = 0. Therefore, the 
y-coordinate (3 of a ^-torsion point satisfies (3 2 = a + 3 and so 

(P 2 - 3) 2 + 60(/3 2 - 3) - 72 = /5 4 + 54/3 2 - 243 = 0. 

The discriminant of the polynomial x 4 + 54x 2 — 243 is — 2 12 ■ 3 15 ; which is a a 
square in L. It follows that L(j3)/L is a Klein-4 extension, and is given by L(/3) = 
L(i, a/— 1 + ( 3 ). The extension L(y/—1 + £ 3 )/L is ramified at the prime ideal above 3 
in Ol and hence is not contained in M. It follows that 16 divides [L(A[8]) : L] and 
hence 32 divides [Q(A[8]) : Q) = 2[L(A[8]) : L}. Thus, [Q(A[8]) : Q) = 96, as desired. 

Since a £ 2A(Q), to is surjective. By Theorem \5.10\ and Theorem \3.S\ we conclude 
that a has odd order for (11/15 + l/3)/2 = 8/15 ~ 0.533 of primes p. 

Example 5.13. Let K = Q, A : y 2 = x 3 - 207515x + 44740234, a = (253, 2904) and 
£ = 2. The elliptic curve A has CM by the full ring of integers in Q(V —7), and 2 splits 
in this ring. A computation using MAGMA shows that the conditions in the remark 
following Theorem \5. 7| are satisfied and thus the conclusion of Theorem \5.8\ holds. By 
Theorem \5.1(J\ and Theorem VS .2\ we have that a has odd order for (1/9 + (l/3))/2 = 
2/9 w 0.222 of primes p. 

Example 5.14. Let K = Q, A : y 2 = x 3 + 3x, a = (1, -2) and £ = 2. The elliptic 
curve A has CM by Z[i] and in this case £ is ramified. A lengthy computation shows 
that the image of uj has index 4 in Z 2 x H , where 

: a,b G Z 2 ,a 2 + b 2 = 1 (mod 2)| 
is the corresponding Cartan normalizer. The image of ' u>i is generated by 



One can compute that in this case ^F(G) = || ~ 0.531. 



M), 



l o 
o -1 



(0,0), 



(1,1), 



2 
1 
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6. Higher-Dimensional Abelian Varieties 

If the abelian algebraic group A is projective, then A is an abelian variety. In this 
section we will describe the case when dim(A) > 1. Assume that <fi = [£], the 
multiplication by £ map and let d = dim(A). 

To determine the image of u it is crucial to know about the image of p : Gal (T^/F) 
GL 2 <i(Z^). 

The Weil e m -pairing is a nondegenerate, skew-symmetric, Galois invariant pairing 
e m : A[m] x A[m] — > p m . If $ : A — ^ A is a polarization defined over K, then 
the pairing e mj $ : A[m) x A[m] — ► /i m given by e mi $(a, 6) = e m (a, $(&)) is skew- 
symmetric and Galois invariant. Moreover, it is nondegenerate provided that m is 
coprime to #ker($). The Galois invariance and non- degeneracy implies that T n C 
GSp 2d (Z/£™Z), the group of symplectic similitudes. For more background about 
abelian varieties, see [32], section A. 7. 

We have the following surjectivity criteria for p. 

Proposition 6.1. Let £ be a prime, d > 2 and assume that gcd(£, # ker($)) = 1. 
Then, the £-adic representation p : Gal (T^/ F) — > GSp 2 d(Z^) is surjective if and only 
if the following conditions hold: 

(1) F is linearly disjoint from for alln. 

(2) Gal(T 1 /F) = GSp 2d (Z/ffl). 

(3) If £ = d = 2, then T\ is linearly disjoint from Q(y / 2, 

Proof. This is a restatement of Vasiu's Theorems 4.1 and 4.2.1 from [138]. □ 

Remark. Suppose that d is odd, d = 2 or d = 6, and End(A) = 7L. Theoreme 
3 of [311 Resume des cours de 1985-1986] implies that the conditions of the above 
proposition are satisfied for £ sufficiently large. 

The following result gives criteria for when the map to the Kummer part is surjective. 

Theorem 6.2. Let £ be prime, d>2 and assume that gcd(£, # ker($)) = 1, and the 
£-adic representation p : Gal(Too/F) — > GSp 2d (Z^) is surjective. Then the Kummer 
map k : Gal (K^/T^) — > l?f is surjective if and only if the following conditions hold: 

(1) a ^ £A(F), 

(2) if £ = 2, fa £ A(Tx). 

Proof. When £ > 2, the only modification necessary in the proof of Theorem 15.21 
is in showing that Hom-rj / N^ n+1 \ A[£]) = 0. To justify such a statement, one 
can use the computation of Liebeck and Seitz (see Proposition 1.10 of [23]) of the 
composition factors of this module over Fg, combined with the Restriction Theorem 
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(see the theorem in Section 2.11 of Humphreys' book [13]) to conclude that these 
composition factors are still irreducible over ¥ e . We find that /jV( n+1 ) is a one- 
dimensional extension of an irreducible 7^-module of dimension 2g 2 + g, so again 
H.om Tl (N^/N( n+1 \ A[t\) = 0. 

When £ = 2, we assume that fi\ G" A(T\). We seek to apply Lemma [3761 In this case, 

V = N^- n '/N^ n+1 ^ has a natural submodule of dimension V\ = 2g 2 — g. In order to 
conclude that Rom^N^ /N( n+1 \ A[2]) = 0, one shows that any submodule M of 

V with V/M = A[£] must contain V\. This implies that V\ has codimension one in 
M, and it can be checked that no such submodule M exists. Thus, the hypotheses 
of Lemma [3.61 are satisfied, and we can conclude that a G" A(F) D £A(T n ) for any n. 
Then Theorem 13.41 implies that uo n is surjective. □ 

Remark. When £ = 2, GSp 2d (F 2 ) = Sp 2d (F 2 ) is simple (provided d > 3) and so 
Lemma \3. 7| does not apply. Indeed, suppose that a G 2A(T\), but a G" 2A(F). This 



means that S\(a) lies in the kernel of the restriction map H l (F, A[2]) — > H 1 (Ti, A[2]). 
However, the exactness of 

> H 1 (Gal (Ti /K),A[2]) > H\F,A[2]) > H\T X ,A[2]) 

implies that the kernel is H 1 (GaA(Ti/K),A[2]), which is shown to be isomorphic to 
Z/2Z by Pollatsek in [28]. It follows from the explicit construction of the non-trivial 
cocycles that a G 2A(T\) if and only if the preimages of a are a union of two Galois 
orbits of size 2 2d ~ 1 + 2 d ~ 1 and 2 2d ~ 1 — 2 , respectively, corresponding to the subgroups 
S0 2 f d (F 2 ) and S0 2d (F 2 ) stabilizing the two isomorphism classes of quadratic forms of 
dimension 2d. It is interesting to ask whether there are abelian varieties A/Q and 
a G A(Q) — 2A(Q) for which this occurs. 

Corollary 6.3. The arboreal representation uj : Gal (K oa /F') — > (Z^) M x GSp 2d (Z^) 
is surjective if and only if the conditions of Theorem \ 6.S\ and Proposition \6.1\ are 
satisfied. 

Example 6.4. Let C be the hyperelliptic curve with affine model y 2 = f(x), where 
f(x) = 4x 6 — 8x 5 + 4x 4 + 4x 2 — 8x + 5 and let A = Jac(C) . In [51 p. 2] a non-singular 
model for C is given by 

Y 2 = 5X 2 - 8X X! + AX 2 + AX 2 - 8X 2 X 3 + AX 2 



XqX 2 — X 2 , ^0-^3 — X1X2, X1X3 — X. 



The two points at infinity are at (X : X\ : X 2 : X 3 : Y) = (0 : : : 1 : —2) 
and (0 : : : 1 : 2). Denote the first by oo+. Let P = (1 : 1 : 1 : 1 : 1) and let 
a = oo + — P G 



Proposition 6.5. With A and a given above, we have 

Gal {KJF) (Z £ ) 4 x GSp 4 (Z, 

for all primes £. 



ITERATED ENDOMORPHISMS 



31 



Proof. It suffices to verify the conditions of Theorem 16.21 and Proposition 16. 1L Note 
that since J = Jac(C), J is endowed with a canonical principal polarization, so 
#ker($) = 1. 

Next, we check condition (1) of Theorem 16.21 The Kummer surface K associated 
to A is A/([— 1]). It is a quartic curve in P 3 with nodes at the images of A[2], the 
fixed points of [—1]. Multiplication by [m] descends to a morphism of K, and one 
may use the map : A — > K to define a height function h : A — > K on A. Let h 
denote the corresponding canonical height. One may use MAGMA to verify that for 
all P G A(Q), \h(P) - h(P)\ < 3.10933 and that h(a) = 0.247060. Suppose to the 
contrary that there is a prime £ and (3 G A(Q) with £j3 = a. Then, h((3) = -kh{a) 
and hence \h((3)\ < 3.10933 + 0.247060. Computing all points P G J(Q) satisfying 
the above bound, we find that there are no such (3. 

Condition (1) of Proposition 16. II is obvious. 

Next, we check condition (3) of Proposition I6.ll Since Q(A[2])/Q has Galois group 
5*6, there is a unique quadratic subfield of Q(v4[2]), and computing the discriminant 
of f(x), we find it to be Q(a/— 3 • 13 • 31). Hence, Q(A[2]) is linearly disjoint from 
Q(y/2,i), as desired. 

Next, we check condition (2) of Proposition 16 . 11 In [6], Dieulefait indicates how one 
can check that the mod £ Galois representations associated to an abelian surface A 
with End(A) = Z are surjective at all but finitely many primes, conditional on Serre's 
conjecture. To show that End(v4) = Z, one can compute that the two-torsion points 
of A[2] are the Weierstrass points, and so Q(A[2]) is the splitting field of f(x). This 
has Galois group isomorphic to Sq = GSp 4 (F 2 ). Hence, Proposition 16.11 implies that 
the 2-adic Galois representation is surjective. The injectivity of the map 

End(A) ® Z e -> End Zt {T e (A)) Z e 

implies that End(v4) has rank 1 and so End(A) = Z. Using the algorithm of Liu Q24J), 
we find that the conductor of A divides 2 4 -3 5 -13-31. We use Dieulefait's recipe and the 
explicit computation of the characteristic polynomials of the images of Frobenius in 
Aut(A[£]) afforded by MAGMA. We find that at all primes £ > 7 of good reduction, 
the mod-£ representation is surjective conditional on Serre's conjecture. Further, 
explicit computations mod 3, 5, 7, 13 and 31 show that the mod £ representation is 
surjective there as well. We remark that Serre's conjecture has been proven thanks 
to work of Khare and Wintenberger [T7| and p.8], and Kisin [19] . 

Finally, we check condition (2) of Theorem 16.21 In Appendix I to [S] , Cassels and 
Flynn make explicit the morphism on the Kummer surface K induced by the multipli- 
cation by 2 map on A. One can check that the image (p(a) of a on K is (0 : 1 : 1 : —4). 
Using this, one may compute the preimages on K of the point 4>(a), which corresponds 
to a G A(Q). This gives rise to a system of four quartic equations in four unknowns. 



32 



RAFE JONES AND JEREMY ROUSE 



Using MAGMA's Grobner basis routine to solve the corresponding system of alge- 
braic equations, we find that the sixteen preimages are of the form (1 : ai : a-i : a^). 
Here a\,a2 and 03 generate Q(/3) where (3 has minimal polynomial 

g (x) = x w - 12a; 14 - 36s 13 + 316s 12 - 912a; 11 + 1412a; 10 - 472a; 9 - 1764a; 8 

+ 3544a; 7 - 4104a; 6 + 3912a; 5 - 3588a; 4 - 5888a; 3 + 8232a; 2 - 4576a; + 884. 

It follows that the preimages of (0 : 1 : 1 : —4) lie in degree 16 extensions of Q and 
hence [Q(ft) : Q] = 16. Hence, we cannot have ft G Q(A[2)) since Gal (Q(A[2])/Q) ^ 
Sq has no subgroups of index 16. Thus condition (6) holds. It follows that the 
splitting field of g(x) is K\ and so the Galois group of g(x) is isomorphic to (Z/2Z) 4 x 
GSp 4 (Z/2Z). ' ' ' □ 

Remark. As far as the authors are aware, the curve C given above is the first example 
of a hyperelliptic curve of genus 2 for which all of the t-adic Galois representations 
associated to Jac(C) are surjective. 

Unfortunately, we have been unable to exactly compute the corresponding densities 
for the groups Z 4 xi GSp 4 (Z^). The nature of the explicit method employed in The- 
orem 15.51 seems unlikely to be fruitful. Here is a table of bounds computed from 
conjugacy class information for GSp 4 (Z/£ n Z). 

£ Lower bound Upper bound n used 



S (« 0-579) H (« 0.586) 4 
iH (- 0.683) Hi (- 0.700) 2 



In general, if £ is prime and G^[ot) = 7L\ x GSp 4 (Z^), we have 

£ 7 - 2£ 6 + 4£ 4 - 2£ 3 + 2£ 2 - 5 £ 7 - £ % - £ 5 + 3£ 4 - 2£ 3 + £ 2 - 4 

(£ 4 - 1)(£ 2 - 1)(£ - 1) - ( ' ~ f - £ 5 - £ 3 + £ ' 

These follow from the computation of the number of M G GSp 4 (F^) with det(M— I) ^ 
(mod £) in [2H p. 61]. 

Appendix A. A result relating to Question 11.31 

by Jeffrey D. AchteiH 
Fix an odd prime £. This appendix provides a proof of: 
Proposition A.l. The limit\im g _ too J-'('I^ 9 x GSp 29 (Z£)) exists. 



Martially supported by NSA grant H98230-08-1-0051. 
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The proof requires some notation concerning symplectic groups. Let i be a fixed 
prime. For each natural number g, fix a free Z^-module V g of rank 2g, equipped with 
a symplectic pairing (•,•). For each natural number n, let V g>n = Vg^^Z^j i n Zg. After 
a choice of basis of V g , we have GSp 29 (Z^/£"Z^) = GSp(V^ n , (•, •)). For natural num- 
bers n> m, let p g ^ m : GSp 29 (Z £ /£ n Z^) -> GSp 2ff (Z^/f n Z^) and p 9i „ : GSp 29 (Z^) -> 
GSp 2ff (Z£/£ n Z£) be the usual reduction maps. For any ring A there is a group ho- 
momorphism mult : GSp 2s (A) — > A x , and Sp 2s (A) = mult _1 (l). If m G A x and 
S C GSp 2g (A), let 5( m ) = Snmurr^m). 

Since a matrix over Ze/£ n Ze is invertible if and only if its reduction modulo £ is, 

#GL 9 (Z,/rZ,) = e^-WftGLgiZe/eZe) 

9 
3=1 

If n > 2, a direct calculation shows that kerp Si „ in _i is isomorphic to the Lie algebra 
Sp2g,z t /ez t , so that for n > 1 we have 

#s P29 (z,/rz,) = ^- l ^ 2+ ^^ 2g {z t /a,) 

9 

= £(n-i)(2g 2 +g) fi-^^fj _ i). 

Since mult is surjective, # GSp 2g (Z e /e n Z £ ) = #((Z e /£ n Z e ) x )#Sp 2g (Z e /£ n Z e ). 
For < r < g define 

#s P2 ,(z £ /rz £ ) 



(6) S(g,r,n) 

(7) L(</,n) 



#Sp 2r (Z,/£«Z,)#Sp 2(9 _ r) (Z,/£«Z,) 

#s P2fl (z £ /rz £ ) 



# GL,(Z,/^Z,) • # GL g {Z t /t»Z t ) ' 

with the convention that for g — 0, Sp 29 (Z£/£™Z£) and GSp 2s (Z^/£ n Z£) are the trivial 
group. Then S^g, r, n) is the number of decompositions Vg >n = E © W where E = V r>n 
and W = Vg_ rtn , while L(g,n) is the number of decompositions V 9jn = © VF where 
E and W are each Lagrangian. 

For x E GSp 2ff (Z £ /rZ £ ), let 

e(x) = min{ord^(det(:r — id)) : x E Pg^(x)}. 

Set ^ 
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Lemma A. 2. For each g and n, \T{Z 2 ^ g x GSp 2g (Z^)) — F(g,n) \ < i~ n . 

Proof. Let C 9tn = {x G GSp 2s (Z^/£ n Z^) : e(x) < n}. If x G C g , n and if x G p~^(x), 

then ord£(det(x — id)) = e(x). Let D gn = GSp 2g (Z^) — p g ^(C gjn ). By Theorem 13.81 
we have 

\F(g, n) - F(Z? x GSp 2g (Z,))| = / (r» - r"*®)dj* 

< r n n(5 g , n ) < r n . 

□ 

If x G Sp^Z^/^Z^), then its characteristic polynomial f x (T) is self- reciprocal. More 
generally, if x G GSp^Z^/fZ^) has multiplier mult (a:) = m, then the roots (over the 
algebraic closure of Zg/£Zi) of f x (T) may be arranged in g pairs {a,m/a}. 



If x G GSp 2g (Z£/£ n Z£), let mult (a;) G (Z^/£Z^) X be the reduction of its multiplier 
modulo I. Define subsets of GSp 2g (Z£/£ n Z£) 

U g , n = {xe GSp 2g (Z e /£ n Z e ) 

= {xe GS P29 (z,/rz,) 

M g , n = {xe GS P2g (Z e /£ n Z e ) 
= {xe GSp 2g (Z l /rz,) 
and quantities 

a (m) _ ff^ff.n j,( m ) _ WJVg,n j( m ) _ 



each eigenvalue of is 1 or mult(x)} 

/ X (T) = (T — 1) 9 (T - mult(x)) 9 mod £} 
Pg,n,i(x) — id is invertible} 
/x(l)^0 mod 1} 



h{m) _ W^9,n , (m) = l V- P~<*) 



"■" #s P2g (z,/^z,) #s P2g (z,/^z,) *» #s P29 (z,/^z w 



for each m G (Z^/£ n Z^) x . We adopt the convention that for g — 0, W 0jn = A/o, n = 
GSp (Z£/£ n Z£). In particular, = 6^ — 1- 

While this notation is convenient, in fact the quantities dg$ and bg$ are independent 
of n, in the following sense. 



Lemma A. 3. Suppose g and n are natural numbers with n > 2, and that m G 

iffi and b g ™rl = b g m x 



(Z/£ n ) x . Let m be the class of m modulo t. Then a g "$ = o^f and b g m n = b^f . 



Proof. It suffices to prove that if x G GSp^Z^/fZ^) with multiplier mult (2) = 
m, and if m is any lift of m to (Z^/rZ) x , then ftp-^x)^ /#$p 2g {Z e /e n Z e ) = 
l/#Sp 2ff (Z^Z|). Since p g ^ x is surjective, #p~J n)1 (z) = . Suppose w! is 

a second lift of m. Choose y G j;L (id) with mult(y) = m'm -1 ; then multiplication by 
y shows that #p gi n,i(^)^ = ^Pg.n.itX)*" 1 '' 1 - There are £ n ~ x different lifts m, and thus 
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#pii(^) (m) /#Sp 29 (Vrz,) = r("- 1 )£^ 2+ f +1 )("- 1 )/^ 2+ ^(- 1 )#s P29 (z,/«,), as 

desired. □ 
Define generating functions 

Suppose x G GSp 2 gC^e/£ n %e) — GSp(V r 9i „). Then x uniquely determines an x-stable 
decomposition 

(8) V g , n = E X ®W X , 

where E x = V r ^ n for some r, W x = V^_ nn , x\e x G W rj „, and x\w x G M g - r ^ n . We may 
thus index elements of GSp(V^ in ) by decompositions (|Hj) and suitable choices for x\e x 
and x\w x , so that 

(9) # GSp 29 (Z,/rZ,)( m ) = £ %, r, n)mS#^-ln- 

r=0 

Lemma A.4. For each n G N and m e (Z e /£ n Z e ) x , A^iT) is a convergent nonva- 
nishing function on a (complex) disk of radius R > 1. 

Proof. By Lemma [A.31 it suffices to prove the result for n = 1. Recall that if H is a 
finite group of Lie type over TLijlTL^ then the number of unipotent elements in H is 
£dim/f-rank# Therefore, the number of unipotent elements in GSp 29 (Z£/£Z£) is 

t 29 " 1 , and the number of unipotent elements in GL^Z^/^Z^) is l g2 ~ 9 . 

In particular, a^j = £ s2 / nj=i(^ 2jf — -Qj an appeal to the ratio test shows that (T) 

converges on any disk of radius smaller than £. Moreover, since = 1 and £ > 3, 

a o!i > S g >i a g!i an d thus A^\T) is nonvanishing on some disk of radius greater than 
one. 

Now suppose m G (Z^/£Z^) X is not one. If x G U^' \ then there is a decomposition 
V g x = E @W where E and W are Lagrangian subspaces stable under x, x\e is 
unipotent, and x\w is uniquely determined by mult(x) and x\e- The number of 
decompositions of V g> x as a sum of Lagrangian subspaces is L(g, 1), and the number 

of choices for x\e is f^ 2-9 . Therefore, = l/ITjLiC^ 7 ' — I) 2 ' aric ^ the argument 
proceeds as before. □ 

Lemma A. 5. Suppose n G N and m G (Z^/£ n Z^) x . TTien lim ff ^ 00 &g™' ) exists. 
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Proof. Using ([6]), the decomposition (jHJ) shows that for each g, Ylr=o c &^g-r,n = 1- 
Therefore, there is an equality of generating functions 

A^(T).B^(T) = J2 T9 = Y^t- 

By Lemma IA.41 there exists a number R > 1 such that the function Cn(T) : = 
l/An(T) is analytic inside |T| < R. Let Cn (T) = c^T 9 be the series expansion 
of C centered at the origin. Since B { ™\t) = ct ] (T)/(l — T) , we have 

9 



9,3 ■ 



3=1 

Since Cn"^(l) is well-defined, lim^oo bg$ = Cn(l) exists. □ 

Proof of Proposition \A.1{ By Lemma [A.21 it suffices to show that for each n, lim^oo F(g, n) 
exists. Suppose x G GSp(V^„); write V g>n = E x © W^. as in (JHJ). Then e(x) = e(x\e x )- 
Therefore, we may compute F(g,n) as 



K9 ' 1 #GSp 2o (Z £ /£™Z,) ^ 

£%,r,n)#A/*2, n £ reW 



#GSp 2o (Z £ /£ n Z £ ) 

-i 3 4/- A/"( m ) 1 

#(z^"Zf) x v n #Sp 2fa _ r1 (z / /#»z / ) ' #Sp 2r (Z / /^Z < ) ^ 



Since for fixed n there are finitely many choices for m, it suffices to show that 

i q cm o 11 or +■ Vi o m +■ Vi o nnrrDcnnm rlinrr for 

'9>0 ( 

the convergent (Lemma |A.4|) series Y^ g >o a 9$- ^ 



lim^^oo ^^ =0 bg^l ndi™^ exists. This follows from the existence (Lemma [A. 5 j) of lim^oo 6g m ^ 
and the fact that each term of ^ o>0 dg$ is smaller than the corresponding term in 



Appendix B. Numerical Data 



In this appendix, we give numerical data related to the examples given in the paper. 
Each table below includes several choices of x, the number of primes < x where a 
(and/or A) has good reduction (total primes), and the number of such primes where 
the order of a is coprime to I (good primes), and the ratio. 

The following is data for Example 14.41 A : x 2 — y 2 = 1, with £ = 2 and a = (|, |). 
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X 


10 3 


10 4 


10 5 


10 6 


10 7 oo 


Good primes 


57 


406 


3197 


26200 


221805 


Total primes 


167 


1228 


9591 


78497 


664578 


Ratio 


.34132 


.33062 


.33333 


.33377 


.33375 .33333 



The following is data for Example I4.6[ A : x + 7y 



7 and a = (§, J). 



X 


10 3 


10 4 


10 5 


10 6 


10 7 oo 


Good primes 


115 


870 


6805 


55608 


470765 


Total primes 


167 


1228 


9591 


78497 


664578 


Ratio 


.68862 


.70847 


.70952 


.70841 


.70837 .70833 



The following is data for Example I4.8[ A : x 3 + 2y 3 + 4z 3 — 6xyz = 1, with £ = 2 and 
a =(-1,1,0). 



X 


10 3 


10 4 10 5 


10 6 


10 7 


oo 




Good primes 


62 


492 3840 


31353 


265226 






Total primes 


168 


1229 9592 


78498 


664579 






Ratio 


.36905 


.40033 .40033 


.39941 


.39909 


.398c 


>1 


The following is data for Example 15.41 A 


:y 2 + y 


= x 3 — X. 


with i 


X 


10 3 


10 4 10 5 


10 6 


10 7 


oc 




Good primes 


93 


654 5029 


41080 


348035 






Total primes 


167 


1228 9591 


78497 


664578 






Ratio 


.55689 


.53257 .52434 


.52333 


.52369 


.523c 


>1 



The following is data for Example 15.121 A : y 2 = x 3 + 3, i = 2 and a = (1, 2). 



X 


10 3 


10 4 


10 5 


10 6 


10 7 oo 


Good primes 


90 


670 


5093 


41868 


354068 


Total primes 


166 


1227 


9590 


78496 


664577 


Ratio 


.54217 


.54605 


.53107 


.53338 


.53277 .53333 



The following is data for Example I5.13[ A : y 2 
a = (253,2904). 



207515a; + 44740234, 



2 and 



X 


10 3 


10 4 


10 5 


10 6 


10 7 oo 


Good primes 


39 


269 


2113 


17407 


147714 


Total primes 


165 


1226 


9589 


78495 


664576 


Ratio 


.23636 


.21941 


.22036 


.22176 


.22227 .22222 



The following is data for Example 15.141 A : y 2 = x 3 + 3x, i = 2 and a = (1, —2). 
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X 


10 3 


10 4 


10 5 


10 6 


10 7 oo 


Good primes 


89 


663 


5082 


41757 


353023 


Total primes 


166 


1227 


9590 


78496 


664577 


Ratio 


.53614 


.54034 


.52993 


.53196 


.53120 .53125 



The following is data for Example 16.41 A = Jac(C) where C : y 2 = Ax 6 — 8x 5 + 4x 4 + 
Ax 2 - 8x + 5, t = 2 and a = oo + - P. 



X 


10 3 


10 4 


10 5 


10 6 


10 7 oo 


Good primes 


101 


725 


5584 


45832 


388144 


Total primes 


164 


1225 


9588 


78494 


664575 


Ratio 


.61585 


.59183 


.58239 


.58389 


.58405 0.57944 < T < 0.58643 
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